Upgrading 220 UTM device to 230 UTM device - Issues

Hi dstanek57,

I would upgrade the unit to the latest firmware (just in case there is an issue).

to load the config on without "Unique Site Data" - may just be what you need when you create a backup

I would also create a test environment first, test it all (most) out first prior to deployment.

if both are active then there may be problem with duplicate IPs ... yeah I know that's obvious.

for a license I would probably create an 30 day evaluation license, "to try before you buy"

downgrading and upgraded license is a pain, and Sophos don't like doing it.

have a look at the following article, it may help.

https://community.sophos.com/products/unified-threat-management/f/hardware-installation-up2date-licensing/29796/migrating-from-utm-220-to-sg-230

happy migrating

Hi dstanek57,

I would upgrade the unit to the latest firmware (just in case there is an issue).

to load the config on without "Unique Site Data" - may just be what you need when you create a backup

I would also create a test environment first, test it all (most) out first prior to deployment.

if both are active then there may be problem with duplicate IPs ... yeah I know that's obvious.

for a license I would probably create an 30 day evaluation license, "to try before you buy"

downgrading and upgraded license is a pain, and Sophos don't like doing it.

have a look at the following article, it may help.

https://community.sophos.com/products/unified-threat-management/f/hardware-installation-up2date-licensing/29796/migrating-from-utm-220-to-sg-230

happy migrating

Jason, I have a different process for this scenario.

It is indeed necessary to have the new unit at the same or newer version.  When a license is upgraded from a 220 to a 230 on MyUTM, there is no effect on the existing 220 license.  I would download a copy of the 220 license before upgrading just in case I needed to re-apply the license in the 220.  Only we Sophos partners can create trial licenses, but because of the foregoing, he won't need one.  In any case, the expiration date of his 230 license will not be affected whether he upgrades sooner or later.

Here's my recommended procedure for an upgrade or a replacement for a dying unit:

1. Do a quick, temporary install so that the new device can download Up2Dates if needed.
2. Apply the desired Up2Dates (stop at 9.506 today) and do a factory reset.
3. On the current UTM in use, on the 'Hardware' tab of 'Interfaces', assign the MAC as the Virtual MAC for the NICs in use.
4. Create a backup and load it onto a USB memory stick.
5. Reboot the new device with the USB memory stick in place and remove the memory stick after the boot is complete.
6. Connect a PC to the new device, upload the license for the new device and then disconnect the PC, leaving the new device powered up.
7. Power down the old device and move the cables to the new device.  Done.

Cheers - Bob

Hi Bob,

Never thought of doing it that way, ingenious.

I'll remember that one, thanks

Jason